Supply chain β›“ Supply Chain

Louis Vuitton Third-Party Breach (July 2025)

πŸ“… 2025-07-01 🏒 Third-party vendor
Primary Source β†—

Incident Details

Louis Vuitton says regional data breaches tied to same cyberattack. Luxury fashion giant Louis Vuitton confirmed that breaches impacting customers in the UK, South Korea, and Turkey stem from the same security incident, which is believed to be linked to the ShinyHunters extortion group. Update 7/17/25: Updated story with links to breach notifications for Italy and Sweden as well. Since last week, the retailer has been notifying customers that their info was exposed in a data breach, first in South Korea, then in Turkey, and on Friday in the United Kingdom. After publishing, BleepingComputer learned that notifications also went to customers in Italy and Sweden.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Third-party vendor
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2025-07-01 Breach occurred
  2. 2025-07-16 Publicly disclosed